2 min lesson
Isolation & sandboxing
Explain your answer to "Why might a microVM like Firecracker be a better fit than a plain container for executing untrusted agent code and what is the main thing you give up?" Add one concrete detail from the lesson.
Step 1 of 3
This is the section closest to the heart of the role. Cursor's agents read, write and execute code, often code the agent itself just generated, sometimes on infrastructure that also touches customer data. Running that code safely is not a checkbox. It is the product's central security problem.
Treat every agent execution as untrusted by default. The prompt could be poisoned, the generated command could be hostile, a tool call could try to read a file it has no business touching. Your job is to give that code somewhere to run where being hostile doesn't matter.